This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json) Hash identifier: 08dANZ2ykfKkDw8cgTCtUe41eQ1uhTXgdK2+0f84QH8= Subject key identifier: EB:28:F6:91:72:CF:8D:5F:DA:48:AF:31:35:FB:FA:39:F1:82:95:80 Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Certificate serial: 019BAD5CE9CF8EE158813FF30F2D0414A346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 14:01:46 +0000 Manifest this update: Sun 11 Jan 2026 14:01:46 +0000 Manifest next update: Mon 12 Jan 2026 14:01:46 +0000 Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: CUlIVy5iS9WW2Lfvel4Y9HMtgZY7IbS9byMKQmv8GK4=) 2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:5c:e9:cf:8e:e1:58:81:3f:f3:0f:2d:04:14:a3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46 Validity Not Before: Jan 11 14:01:46 2026 GMT Not After : Jan 12 14:01:46 2026 GMT Subject: CN=eb28f69172cf8d5fda48af3135fbfa39f1829580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:66:db:b2:bd:a8:3f:41:66:ce:87:25:75: 9c:6e:1e:d3:7a:39:f9:bd:24:67:13:50:10:2a:32: a3:b7:13:1b:50:dc:b5:d2:a4:88:37:7d:29:4c:2d: 58:80:b1:4e:f9:e8:5d:47:3a:1a:e6:94:41:43:8c: 2a:58:a9:bb:19:5c:f7:b8:da:7e:d4:8d:ae:a8:60: a0:69:63:fa:f9:ae:df:49:f9:ed:48:ac:9f:bc:a7: 1b:2c:8f:d6:f3:c7:ae:28:0a:90:9a:2d:1d:b6:b1: 95:11:fc:63:0d:5c:88:06:ae:d2:ce:6a:dd:ff:a9: cb:e9:20:4a:d0:6d:ce:94:85:09:84:8b:8b:44:42: f5:f1:73:00:4b:23:2a:98:36:f4:27:6b:a4:d6:25: 9e:51:9a:50:28:d3:37:0c:82:95:7c:74:66:44:8f: ed:37:50:17:21:1c:39:8a:e5:6d:e5:88:9a:3f:84: 12:2d:be:98:cb:f6:8e:8e:b8:64:4b:f5:7d:db:00: a3:d0:b7:e6:c4:68:34:f9:8b:4b:a8:ea:ad:43:b2: d0:3c:0d:f1:a7:ab:80:1a:24:fc:d4:fb:9f:ba:16: 08:ce:e7:3a:4e:31:fe:b1:da:66:d7:be:29:6e:ff: 48:c7:f7:58:63:b3:fa:be:80:42:52:e7:60:0e:d1: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:F6:91:72:CF:8D:5F:DA:48:AF:31:35:FB:FA:39:F1:82:95:80 X509v3 Authority Key Identifier: keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:72:44:55:f5:f6:8b:8b:f2:87:12:29:4b:d9:6d:92:33:50: c0:5c:87:45:82:68:c7:8a:c1:96:d0:21:be:79:4d:5e:6d:e5: 7d:2a:f8:c1:f2:f4:a4:46:df:f5:3d:f6:5b:9f:69:cc:d2:14: cd:cf:92:c6:14:b6:6b:b5:64:21:d9:b0:a1:43:a8:8c:a5:31: 60:0c:bf:94:b7:58:a1:e5:db:bd:a2:1e:5c:4b:80:60:ea:92: 02:7e:d3:a4:24:a3:2e:cc:fd:2a:71:fa:35:36:a8:90:20:08: 60:28:88:c9:13:50:84:fb:a8:18:9f:16:8c:8d:9b:c8:25:58: bf:b4:2a:07:22:ee:09:f0:6d:f6:82:c0:c1:ce:91:21:a7:c2: 92:93:a1:fa:a9:b7:a5:ad:fc:11:3b:c4:d6:de:ae:61:5b:bc: ac:02:da:46:fd:a6:fa:a8:8d:b0:f6:2f:29:4d:7f:85:00:8e: 37:a1:08:ba:18:a1:fd:c7:12:39:b9:98:39:3a:09:9c:5b:38: 5d:d4:46:f9:88:86:23:c6:43:21:8b:36:c3:22:2f:79:63:1c: 8e:90:e2:a3:1d:63:68:01:85:38:9e:64:45:70:4d:2f:07:a2: 1a:45:6c:f0:fd:03:1a:97:af:e6:30:07:d1:50:c7:38:a5:f8: a0:f4:4a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutXOnPjuFYgT/zDy0EFKNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl ZDFkNDYwHhcNMjYwMTExMTQwMTQ2WhcNMjYwMTEyMTQwMTQ2WjAzMTEwLwYDVQQD EyhlYjI4ZjY5MTcyY2Y4ZDVmZGE0OGFmMzEzNWZiZmEzOWYxODI5NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TVm27K9qD9BZs6HJXWcbh7Tejn5 vSRnE1AQKjKjtxMbUNy10qSIN30pTC1YgLFO+ehdRzoa5pRBQ4wqWKm7GVz3uNp+ 1I2uqGCgaWP6+a7fSfntSKyfvKcbLI/W88euKAqQmi0dtrGVEfxjDVyIBq7Szmrd /6nL6SBK0G3OlIUJhIuLREL18XMASyMqmDb0J2uk1iWeUZpQKNM3DIKVfHRmRI/t N1AXIRw5iuVt5YiaP4QSLb6Yy/aOjrhkS/V92wCj0LfmxGg0+YtLqOqtQ7LQPA3x p6uAGiT81PufuhYIzuc6TjH+sdpm174pbv9Ix/dYY7P6voBCUudgDtHoaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOso9pFyz41f2kivMTX7+jnxgpWAMB8GA1UdIwQY MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXJEVfX2 i4vyhxIpS9ltkjNQwFyHRYJox4rBltAhvnlNXm3lfSr4wfL0pEbf9T32W59pzNIU zc+SxhS2a7VkIdmwoUOojKUxYAy/lLdYoeXbvaIeXEuAYOqSAn7TpCSjLsz9KnH6 NTaokCAIYCiIyRNQhPuoGJ8WjI2byCVYv7QqByLuCfBt9oLAwc6RIafCkpOh+qm3 pa38ETvE1t6uYVu8rALaRv2m+qiNsPYvKU1/hQCON6EIuhih/ccSObmYOToJnFs4 XdRG+YiGI8ZDIYs2wyIveWMcjpDiox1jaAGFOJ5kRXBNLweiGkVs8P0DGpev5jAH 0VDHOKX4oPRKZg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:42:19 2026 by rpki-client